WordPress plugin
Give - Peer-to-Peer security & vulnerabilities
Closed on WordPress.org
This plugin is no longer available on WordPress.org and will not receive security fixes. Replace it with a maintained alternative.
- Critical0
- High2
- Medium0
- Low0
All Give - Peer-to-Peer vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Peer-to-Peer <= 2.9.5 - Authorization Bypass to Team Modification and Media Upload ≤2.9.5Update to 2.9.6 | CVE-2026-82663 | |
| High7.5 | Peer-to-Peer <= 2.9.3 - Unauthenticated SQL Injection via 'sort' Parameter ≤2.9.3Update to 2.9.4 | CVE-2026-82568 |
- High7.5Peer-to-Peer <= 2.9.5 - Authorization Bypass to Team Modification and Media Upload
≤2.9.5Update to 2.9.6
- High7.5Peer-to-Peer <= 2.9.3 - Unauthenticated SQL Injection via 'sort' Parameter
≤2.9.3Update to 2.9.4
Give - Peer-to-Peer: common questions
Does Give - Peer-to-Peer have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Give - Peer-to-Peer: 2 high. The plugin has been closed on WordPress.org.
How do I check which version of Give - Peer-to-Peer I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Give - Peer-to-Peer vulnerability?
CVE-2026-82663, published Nov 14, 2026: Give - Peer-to-Peer <= 2.9.5 - Authorization Bypass to Team Modification and Media Upload. Severity: High (CVSS 7.5).
Is any Give - Peer-to-Peer vulnerability listed in CISA KEV?
No. None of the known Give - Peer-to-Peer vulnerabilities is currently listed in the CISA KEV catalog.